diff --git a/mutt-2.0.0.tar.gz b/mutt-2.0.0.tar.gz
deleted file mode 100644
index 238ef24..0000000
--- a/mutt-2.0.0.tar.gz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:93a4138ca795d2668e25c8e95c9ef2082447431423163decda83e66a4e42aeaf
-size 5287742
diff --git a/mutt-2.0.2.tar.gz b/mutt-2.0.2.tar.gz
new file mode 100644
index 0000000..e74ecff
--- /dev/null
+++ b/mutt-2.0.2.tar.gz
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:471218babe97968a45704f1e1e17523c4620ad1f92bae4143a4c9749ab1411c8
+size 5293613
diff --git a/mutt.changes b/mutt.changes
index 8a937fd..670f691 100644
--- a/mutt.changes
+++ b/mutt.changes
@@ -1,3 +1,11 @@
+-------------------------------------------------------------------
+Fri Nov 20 22:13:06 UTC 2020 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- update to 2.0.2:
+  * CVE-2020-28896: Ensure IMAP connection is closed after a
+    connection error to avoid sending credentials over an
+    unencrypted connection boo#1179035
+
 -------------------------------------------------------------------
 Tue Nov 10 09:10:53 UTC 2020 - Dr. Werner Fink <werner@suse.de>
 
diff --git a/mutt.spec b/mutt.spec
index 3aa84ec..a4151dc 100644
--- a/mutt.spec
+++ b/mutt.spec
@@ -20,7 +20,7 @@
 %bcond_with    mutt_openssl
 %bcond_without mutt_gnutls
 Name:           mutt
-Version:        2.0.0
+Version:        2.0.2
 Release:        0
 Summary:        Mail Program
 # ftp://ftp.mutt.org/mutt/devel/